Hi Everyone, Can you please suggest the recommended RF and SF number for Splunk clustered environment with total 9 indexersand 7 search heads in IndexerClustering set-up. And also, p...
Hi, We have configured a data input in HF and there is an option to select index there. I have created new index in Cluster master and pushed it to indexers. But that created index is not s...
I am trying to build some modular documentation as a Splunk app on a site with a indexer- and search head cluster. Some of the reasoning behind this is that I spend quite some time r...
...ithout ES and on all indexers via ClusterManager App. Then we set up all the inputs for the addon on the searchhead and could not select the index “M365” but only enter it manually. The problem now is t...
Hi, we are decomisioning our splunk infra, our company was purchased and the new management want to free resources :(. We have 3 search heads (stand alone) + 2 indexers (clustered). They ask me t...
Hi, we have an IndexerCluster with a dedicated Cluster Manager. The indexers have an additional hard drive attached for the custom indexes. The cluster manager has only one hard disk. When a...
Hi, I just installed a indexclusterand i already know that i shoud place Apps to $SPLUNK_HOME/etc/master-apps/ directoty at my manager node to distribute it accross all indexers but i have 2 q...
...ractice, poor judgement, or as intended.
We have 8 main indexers that do what indexers do, all clustered as peer nodes.
The deployment server is the master node and the search head for the cluster (w...
Hi at all, I have to configure a multisite IndexerClusterand I have a dubt: in the Splunk architectig course, the indicated IndexerCluster replication port was 9100. Then reading Multisite Indexer...
When one configures the indexercluster for SmartStore, does each indexer get its own S3 bucket? Or is there just one very large S3 bucket and all indexers write into the same S3 bucket (s...